infinispan-query vulnerabilities

CVEs whose affected-version data names the infinispan-query package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119542Medium· 4.3

1w ago

Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror

A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can cause recursive parsing to exhaust the Java thread stack and throw an uncaught StackOverflowError. An authenticated user with BULK_…

▾ SunlitRed Hat · infinispan-queryEPSS 0.33%via CVEORG